Re: EAP-TLS CN Check Question

David Mitchell wrote:

I've encountered a similar issue I'm not sure how to deal with. Is there a place I can log any attributes of the certificate?

Not at this moment. Patches are welcome.

I log my accounting records via linelog, and as long as the configuration I end up with forces something reasonable into the User-Name value I do log a username. But it occurs to me it might be nice to have some kind of record of the certificate which was used. Either the CN, or serial number, or something. Is there a way to do this?

Source code changes. Alan DeKok.